Analysis

  • max time kernel
    152s
  • max time network
    155s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    19/10/2022, 20:28

General

  • Target

    1973624681ded5d9a85db1d3ff07129578a96b08f90b0ef42abf67740d2ad4d1.exe

  • Size

    320KB

  • MD5

    a13dbad17bbb97118cf1b1442e4d15b0

  • SHA1

    36e87602e01f190cad6d4490173fe21d5b2077cc

  • SHA256

    1973624681ded5d9a85db1d3ff07129578a96b08f90b0ef42abf67740d2ad4d1

  • SHA512

    3160a089daa22f121a388c04948057fe5cfb55a1b3c9911257acc0629453a2c913fe6704753dec28e2cc435bbdd7d53e16e0013c716bbfce60837dfc886b60a7

  • SSDEEP

    6144:I888E/F6vzdshH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:I/0rdO2EB0NxDIBuOFe7/uT

Score
8/10

Malware Config

Signatures

  • Contacts a large (616) amount of remote hosts 1 TTPs

    This may indicate a network scan to discover remotely running services.

  • Drops file in Program Files directory 64 IoCs
  • Modifies registry class 58 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\1973624681ded5d9a85db1d3ff07129578a96b08f90b0ef42abf67740d2ad4d1.exe
    "C:\Users\Admin\AppData\Local\Temp\1973624681ded5d9a85db1d3ff07129578a96b08f90b0ef42abf67740d2ad4d1.exe"
    1⤵
    • Drops file in Program Files directory
    • Modifies registry class
    PID:2784

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2784-132-0x0000000000400000-0x0000000000462000-memory.dmp

    Filesize

    392KB

  • memory/2784-133-0x0000000000540000-0x000000000055E000-memory.dmp

    Filesize

    120KB

  • memory/2784-134-0x0000000000540000-0x000000000055E000-memory.dmp

    Filesize

    120KB